Declarative Device Management (DDM) App Management

Overview

Declarative Device Management (DDM) App Management introduces support for Apple's declarative management framework for application deployment and lifecycle management on iOS and iPadOS devices. Instead of relying on continuous command delivery and periodic pulling, DDM enables devices to apply declarations locally and proactively report state changes.

With DDM, the server sends a declaration to the device only once. The device then applies the configuration, monitors its state, and reports status changes back to the server. This device-driven approach reduces server communication, improves scalability, and provides more timely status updates for application deployments.

DDM App Management currently focuses on core application management capabilities for supported Apple devices.

DDM App Management Workflow

In a DDM workflow, the server delivers the desired state to the device, and the device becomes responsible for maintaining and reporting that state.

When an application is assigned to a DDM-enabled device:

  1. The server sends an application declaration to the device.

  2. The device processes the declaration locally.

  3. The device installs, updates, or maintains the application based on the assigned configuration.

  4. The device continuously monitors application state.

  5. Any installation status or state change is immediately reported back to the server.

This declarative model provides near real-time visibility into application deployment progress without requiring periodic status pulling.

Enable DDM App Management

DDM App Management is enabled through User Settings and is assigned to specific user groups.

To enable DDM App Management:

  1. Go to Users > User Settings.

  2. Under Apple DDM Setting, click +Add setting for specific user group. The Apple DDM Setting page opens.

  3. Enter a name and toggle the Enable DDM App Management slider.

  4. Click Next. The User Setting Distribution page opens.

  5. Select the user group that will use DDM App Management.

  6. Click Done.

After DDM is enabled for a user group, all supported applications assigned to users in that group are processed through DDM App Management. The DDM configuration is tenant-wide but applied through user-group assignments, enabling organizations to gradually roll out DDM to selected users or groups.

Supported enrollment methods

DDM App Management supports iOS / iPadOS devices enrolled using:

  • iReg/ Managed Ivanti Go client

  • Device Enrollment Profile (DEP)

  • Account Driven Device Enrollment

Supported application types

DDM App Management supports the following application types:

  • Public applications

  • VPP applications (Only for Device Enrollment)

  • In-house applications

The application assignment and deployment workflow remains largely unchanged from traditional N-MDM deployments. Existing application distribution processes continue to work while benefiting from DDM's enhanced status reporting capabilities.